3 ms·the client should be responsible for not executing embedded JS in a messageby windows_sucks 4y agothe client should be responsible for not executing embedded JS in a message